all:
  vars:
    ansible_python_interpreter: /usr/bin/python3
    ansible_user: ansible
    ansible_ssh_private_key_file: ~/.ssh/id_ed25519_homelab_ansible
    ansible_become: true
    homelab_lan_cidr: 192.168.1.0/24
    homelab_service_range: 192.168.1.5-192.168.1.40
    homelab_zerotier_network_id: 743993800fa5a34c
    openvpn_network_cidr: 10.78.0.0/30
    openvpn_listen_port: 8443

  children:
    homelab:
      hosts:
        ru-vps:
          ansible_host: vps
          openvpn_local_ip: 10.78.0.1
          openvpn_peer_ip: 10.78.0.2
          openvpn_role: server

    pve_nodes:
      hosts:
        cloud-pc:
          ansible_host: 192.168.1.5
          ansible_ssh_common_args: >-
            -o ProxyCommand="ssh -i ~/.ssh/id_ed25519_homelab_ansible -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new -p 3422 -W %h:%p ansible@157.22.231.198"
          expected_lan_ip: 192.168.1.5
          storage_mounts:
            - src: UUID=ae278333-4116-4225-9b95-595496fadd26
              path: /opt/data
              fstype: ext4
            - src: UUID=940a9a4e-10cf-4380-9d22-a71549066561
              path: /mnt/backup
              fstype: ext4

        mini-pc:
          ansible_host: 192.168.1.10
          ansible_ssh_common_args: >-
            -o ProxyCommand="ssh -i ~/.ssh/id_ed25519_homelab_ansible -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new -p 3422 -W %h:%p ansible@157.22.231.198"
          expected_lan_ip: 192.168.1.10

    lxc_infra:
      hosts:
        pbs:
          ansible_host: 192.168.1.20
          expected_lan_ip: 192.168.1.20

        zt-cloud:
          ansible_host: 192.168.1.21
          expected_lan_ip: 192.168.1.21
          zerotier_ip: 10.122.62.206
          zerotier_node_id: c606e6d181

        zt-mini:
          ansible_host: 192.168.1.22
          expected_lan_ip: 192.168.1.22
          zerotier_ip: 10.122.62.213
          zerotier_node_id: 022ac284e1

        wg-mini:
          ansible_host: 192.168.1.23
          ansible_user: root
          ansible_ssh_private_key_file: ~/.ssh/id_ed25519_homelab
          expected_lan_ip: 192.168.1.23
          openvpn_local_ip: 10.78.0.2
          openvpn_peer_ip: 10.78.0.1
          openvpn_role: gateway

        vaultwarden:
          ansible_host: 192.168.1.24
          ansible_user: root
          ansible_become: false
          ansible_ssh_private_key_file: ~/.ssh/id_ed25519_homelab
          ansible_ssh_common_args: >-
            -o ProxyCommand="ssh -i ~/.ssh/id_ed25519_homelab_ansible -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new -p 3422 -W %h:%p ansible@157.22.231.198"
          expected_lan_ip: 192.168.1.24

        gitea:
          ansible_host: 192.168.1.25
          ansible_user: root
          ansible_become: false
          ansible_ssh_private_key_file: ~/.ssh/id_ed25519_homelab
          ansible_ssh_common_args: >-
            -o ProxyCommand="ssh -i ~/.ssh/id_ed25519_homelab_ansible -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new -p 3422 -W %h:%p ansible@157.22.231.198"
          expected_lan_ip: 192.168.1.25

    vpn_openvpn:
      hosts:
        ru-vps:
        wg-mini:

    shell_hosts:
      hosts:
        ru-vps:
        cloud-pc:
        mini-pc:

    servers:
      children:
        homelab:
        pve_nodes:
        lxc_infra: